Swiss anti-money laundering rules can apply to business models that do not look like traditional banks. Payment flows, asset transfers, crypto-related services, fiduciary arrangements, escrow-like structures or certain advisory and execution models may raise AML questions depending on how the business is actually operated.
The key point is simple: labels do not decide the regulatory outcome. The facts do. A company may describe itself as a platform, broker, family office service, technology provider or transaction coordinator. What matters is whether it accepts, holds, transfers, manages or helps move third-party assets in a way that may qualify as financial intermediation.
That classification should be assessed early.
Switzerland’s AML framework in practical terms
Swiss AML regulation is built around the Anti-Money Laundering Act and related ordinances. Its purpose is to prevent money laundering and terrorist financing by imposing due diligence, documentation, monitoring and reporting obligations on financial intermediaries.
Certain financial institutions are supervised directly by FINMA. Other financial intermediaries are generally expected to affiliate with a recognised self-regulatory organisation, an SRO, for AML supervision.
SRO affiliation is not the same as a full financial market licence. It is, however, a real supervisory relationship. Members must maintain an AML organisation, implement internal rules, identify clients and beneficial owners, monitor risks and comply with reporting duties.
When SRO questions typically arise
An SRO question often arises where a Swiss company or Swiss-based team is involved in the movement or administration of third-party assets.
Typical fact patterns include:
- money transmission or payment execution;
- foreign exchange or crypto exchange activity;
- OTC crypto brokerage;
- fiduciary holding or transfer of funds;
- asset administration or investment-related services;
- escrow-like settlement support;
- transaction structures where the company handles or controls client funds;
- certain trustee, family office or corporate service arrangements.
Not every such activity is automatically subject to SRO affiliation. The assessment depends on the precise contractual setup, payment mechanics, control over assets, client type, professional nature and overall business model.
That is why early classification is important.
FINMA supervision, SRO affiliation and supervisory organisations
Many founders ask whether they need a FINMA licence or an SRO affiliation. The answer depends on the activity.
A bank, securities firm, fund manager, insurance undertaking or certain financial institutions may fall under FINMA licensing or direct supervision. Other activities may not require a full licence but may still trigger AML obligations and therefore SRO affiliation.
Portfolio managers and trustees, for example, operate under a separate supervisory architecture involving FINMA authorisation and supervisory organisations. Other financial intermediaries may be monitored through SRO membership. The boundaries should not be guessed.
For international clients, the practical starting point is a structured regulatory mapping: what exactly does the Swiss entity do, with whose assets, under which contracts and through which accounts?
What an AML organisation needs before applying
A company should not approach an SRO with only a business plan and a website. It should be able to show that it understands and can operate an AML control environment.
Core elements usually include:
- a written business model description;
- a risk assessment covering clients, countries, products and transaction flows;
- internal AML directives;
- client onboarding and KYC procedures;
- beneficial-owner identification procedures;
- sanctions and PEP screening logic;
- transaction monitoring appropriate to the business model;
- escalation and reporting procedures;
- allocation of responsibilities to qualified persons.
The level of detail depends on the business. A simple corporate service model requires a different setup than a cross-border crypto settlement operation. But the principle is the same: the AML framework must be operational, not theoretical.
Documents typically required in the process
Before an SRO affiliation can be assessed, a business should expect to prepare a coherent documentation package.
This often includes:
- commercial register extract, articles and organisational chart;
- ownership and beneficial-owner documentation;
- description of products and services;
- transaction-flow diagrams;
- client onboarding templates;
- AML risk assessment;
- internal AML manual or directives;
- CVs and background information for key persons;
- sample client file logic;
- evidence of training or competence where relevant.
Incomplete documentation leads to delays. Inconsistent documentation creates more serious problems: it suggests that the business model is not yet controlled.
Timing and launch planning
The SRO process should be built into the launch timeline. A company should not start a potentially regulated activity and only later ask whether affiliation is needed.
The timing depends on complexity, quality of documentation and the SRO’s review process. The main bottleneck is usually not the formal application itself but the internal preparation: mapping the business model, documenting risk, assigning responsibility and establishing workable procedures.
In practice, the regulatory readiness work should start before bank onboarding, investor discussions or operational launch.
Where ILFP typically supports
ILFP supports clients at the point where business model, Swiss setup, AML readiness, banking and documentation intersect.
This may include a preliminary regulatory mapping, preparation of AML documentation, coordination with Swiss corporate and accounting setup, SRO application readiness and practical alignment with banks and counterparties. The aim is not to overcomplicate the business, but to identify what must be addressed before the model is scaled.
Next step
If your business may involve third-party assets, payment flows, fiduciary arrangements or crypto/transaction activity in Switzerland, a Regulatory Readiness Check is a practical first step.
This article provides general orientation and does not replace an assessment of the individual case.